CyberArk PTA Modeling Rule

Modeling Rule

CyberArk Privileged Threat Analytics

Details

IDCyberArk_PTA_ModelingRule
From Version8.15.0

Schema

cyberark_pta_raw

Field Type Array?
cefDeviceEventClassId string —
cefName string —
cefSeverity string —
cs1 string —
cs2 string —
cs3 string —
cs4 string —
cs5 string —
dhost string —
dst string —
duser string —
shost string —
src string —
suser string —

Source

CyberArk_Privileged_Threat_Analytics_2_11.xif CyberArk_Privileged_Threat_Analytics_2_11.yml CyberArk_Privileged_Threat_Analytics_2_11_schema.json
Download History Raw 
fromversion: 8.15.0
id: CyberArk_PTA_ModelingRule
name: CyberArk PTA Modeling Rule
rules: ''
schema: ''
tags: ''
supportedModules:
- xsiam